search

winstonjs / node-loggly

A client implementation for Loggly in node.js
http://github.com/winstonjs/node-loggly
Other
233 stars 81 forks source link

Bump request minor version to avoid using a deprecated module (and warnings) #64

Open alextes opened 8 years ago

alextes commented 8 years ago

The request lib was relying on a module called node-uuid. For some reason the author decided it was necessary to deprecate this module and continue with a module called uuid. Using node-uuid now spits warnings to users.

request fixed this in version 2.79.x, however because you chose to lock minor versions the many thousands of users that download this package each month have been getting warnings at build / install time.

Please bump the minor version or unlock the minor version. Thank you!

kevinbror commented 7 years ago

The current request dependency also uses a version of tough-cookie that has known ReDoS vulnerabilities. Please update to the latest request version or unlock the minor version to fix this.

Cheers